Assign Azure AD role to service principal for rbac possible ?

Question

Hi,

We want to automate group membership from Azure AD groups.
The "Groups Administrator" role seems appropriate but this is an Azure AD role, not an Azure role so we cannot assign it to a service principal.

What are our options, we don't want to interactive login for running these scripts
thanks

Answer 1

Hi @Tommy Kozlowski

Thanks for reaching out.

I understand that you are looking to assign "Group Administrator" Azure AD role to the service principal to manage Azure AD groups.

You can directly assign the Azure AD role to service principal as well. By default, Azure Ad applications will not display in the available options, you have to type and select it.

To assign Azure AD role to service principal, Go to Azure AD -> Roles and administrators -> Select the role you want to assign to Service principal.

Go to Assignment ->Add Assignments-> Select the application to which you want to assign the Azure AD role.

Service principal has been successfully assigned to Azure AD role as shown here:

Here applications are allowed for "Active assignment" only.

Hope this will help.

Thanks,
Shweta

------------------------------------------------

Please remember to "Accept Answer" if answer helped you.

Answer 2

thanks a lot !

Answer 3

Hi @Tommy Kozlowski once you sign in using Connect-MgGRaph can you perform the operations using the service principal ?